Bug 2315211 (CVE-2024-46859) - CVE-2024-46859 kernel: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
Summary: CVE-2024-46859 kernel: platform/x86: panasonic-laptop: Fix SINF array out of ...
Keywords:
Status: NEW
Alias: CVE-2024-46859
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2315245
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-09-27 13:23 UTC by OSIDB Bzimport
Modified: 2024-09-27 18:02 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-09-27 13:23:13 UTC
In the Linux kernel, the following vulnerability has been resolved:

platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses

The panasonic laptop code in various places uses the SINF array with index
values of 0 - SINF_CUR_BRIGHT(0x0d) without checking that the SINF array
is big enough.

Not all panasonic laptops have this many SINF array entries, for example
the Toughbook CF-18 model only has 10 SINF array entries. So it only
supports the AC+DC brightness entries and mute.

Check that the SINF array has a minimum size which covers all AC+DC
brightness entries and refuse to load if the SINF array is smaller.

For higher SINF indexes hide the sysfs attributes when the SINF array
does not contain an entry for that attribute, avoiding show()/store()
accessing the array out of bounds and add bounds checking to the probe()
and resume() code accessing these.


Note You need to log in before you can comment on or make changes to this bug.